Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
File: 5faAa3oFHnu7fWmI4n12Q2natwg.mft (raw, json)
Hash identifier: ncaQozn7mnLm04H9PU1uiqlNiFIK6Q1UiSlx5jqkXOE=
Subject key identifier: 78:64:83:93:26:AF:F4:EA:C2:5F:66:B3:DF:85:29:6A:68:2E:E9:21
Authority key identifier: E5:F6:80:6B:7A:05:1E:7B:BB:7D:69:88:E2:7D:76:43:69:DA:B7:08
Certificate issuer: /CN=e5f6806b7a051e7bbb7d6988e27d764369dab708
Certificate serial: 01A0D9BB4100693085D252918CAAB3328F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:02:02 +0000
Manifest this update: Fri 25 Sep 2026 18:02:02 +0000
Manifest next update: Sat 26 Sep 2026 18:02:02 +0000
Files and hashes: 1: 5faAa3oFHnu7fWmI4n12Q2natwg.crl (hash: PnFLyhW1MtfQ9zr9YcXJT8lbyEsQA71gjYtImOcxM8Q=)
2: EGmqqxW5ZYbNCgCt2Vq_Q58zgsI.roa (hash: ySnS4b15lR12wDURMnuDTotPGmQ1ihETTA194Gje264=)
3: MLis4Ykeq134DtJNXq9CJl9fboI.roa (hash: eUp4Hgfo5Ah//leDvRhzGDMVb52xFarJLqKnvTIe10E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:41:00:69:30:85:d2:52:91:8c:aa:b3:32:8f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f6806b7a051e7bbb7d6988e27d764369dab708
Validity
Not Before: Sep 25 18:02:02 2026 GMT
Not After : Sep 26 18:02:02 2026 GMT
Subject: CN=7864839326aff4eac25f66b3df85296a682ee921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:e6:da:68:d4:56:08:9b:51:2c:37:5f:0c:
23:19:c3:67:72:11:0a:fe:15:28:70:5a:5c:da:97:
e6:ca:f7:12:9e:5d:2d:ea:f1:40:01:4a:11:4b:d7:
ff:b1:d2:1a:84:9c:b4:3f:f5:6a:c5:39:93:dc:7e:
4d:31:a1:a1:d5:e3:48:5b:45:60:23:c9:11:89:9f:
48:ce:b0:3c:66:b1:9d:ea:17:1e:3f:53:f9:6c:21:
05:e3:13:5a:73:e6:1e:b8:1b:d6:32:43:a4:b2:42:
64:95:dd:39:30:c5:e3:e5:64:2c:2e:b6:3e:f2:1f:
11:fc:21:ce:35:78:43:fd:dc:c4:1a:32:ac:67:f3:
24:cc:84:cf:93:e4:d1:7f:89:63:d4:9b:15:d0:b8:
e1:5a:a5:fe:29:c4:53:4b:39:e9:21:b8:6f:db:63:
33:bc:ba:b5:7c:88:d4:28:6e:cb:62:24:40:50:3c:
10:e3:5b:a9:80:14:38:41:c3:d7:f6:5c:75:7d:ad:
e1:79:81:8b:6a:fb:b4:7a:4b:38:cf:9f:b1:fb:cf:
60:40:4d:44:24:59:31:27:51:ca:69:c1:c1:ae:49:
f7:f7:23:c7:7e:0e:4d:b9:0c:ab:65:72:89:75:df:
77:fd:cc:ed:cf:64:85:d7:45:fb:89:a3:ce:d9:c5:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:64:83:93:26:AF:F4:EA:C2:5F:66:B3:DF:85:29:6A:68:2E:E9:21
X509v3 Authority Key Identifier:
keyid:E5:F6:80:6B:7A:05:1E:7B:BB:7D:69:88:E2:7D:76:43:69:DA:B7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1c:d4:9f:e3:bf:46:bf:80:b0:27:59:b2:bb:a5:e8:31:ae:
72:1f:f8:82:15:e0:de:dd:7a:a9:61:73:67:15:31:30:80:ea:
31:75:a9:84:a0:e2:25:2b:87:34:62:d2:97:06:2c:fa:f1:48:
cf:d0:25:e6:98:4f:64:64:b0:f5:cb:75:ca:21:9b:b6:e6:b3:
17:1d:42:f9:c1:22:3e:15:b5:3c:c4:91:a3:4a:dc:00:76:98:
5c:9e:1b:2e:ef:40:76:91:2a:24:32:53:2c:fd:57:89:0c:8e:
0e:b7:d7:1d:e7:d3:24:26:b6:58:07:85:19:5d:eb:b0:65:2f:
58:68:49:1b:06:c5:b3:8a:1e:16:4c:a5:0d:de:72:ef:d0:a9:
00:85:04:e4:35:f0:ba:6f:c3:03:1c:71:5c:1b:76:f3:cd:21:
34:b5:b7:9f:43:10:00:3f:ad:29:06:7e:0e:8d:50:47:44:f3:
6f:42:f4:49:fd:c9:d8:30:fa:46:1a:9f:39:58:a1:df:08:94:
79:30:44:a0:cf:74:a1:0f:c3:ec:98:96:fc:7e:df:0f:a0:86:
08:9f:59:d7:6d:8c:10:96:59:02:16:00:49:38:6c:1b:53:02:
30:42:f1:ba:f3:b6:44:1a:0f:8c:5a:0b:03:9d:20:c0:89:af:
ca:ac:3b:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZu0EAaTCF0lKRjKqzMo8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZjY4MDZiN2EwNTFlN2JiYjdkNjk4OGUyN2Q3NjQzNjlk
YWI3MDgwHhcNMjYwOTI1MTgwMjAyWhcNMjYwOTI2MTgwMjAyWjAzMTEwLwYDVQQD
Eyg3ODY0ODM5MzI2YWZmNGVhYzI1ZjY2YjNkZjg1Mjk2YTY4MmVlOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fHm2mjUVgibUSw3XwwjGcNnchEK
/hUocFpc2pfmyvcSnl0t6vFAAUoRS9f/sdIahJy0P/VqxTmT3H5NMaGh1eNIW0Vg
I8kRiZ9IzrA8ZrGd6hceP1P5bCEF4xNac+YeuBvWMkOkskJkld05MMXj5WQsLrY+
8h8R/CHONXhD/dzEGjKsZ/MkzITPk+TRf4lj1JsV0LjhWqX+KcRTSznpIbhv22Mz
vLq1fIjUKG7LYiRAUDwQ41upgBQ4QcPX9lx1fa3heYGLavu0eks4z5+x+89gQE1E
JFkxJ1HKacHBrkn39yPHfg5NuQyrZXKJdd93/cztz2SF10X7iaPO2cXIAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhkg5Mmr/Tqwl9ms9+FKWpoLukhMB8GA1UdIwQY
MBaAFOX2gGt6BR57u31piOJ9dkNp2rcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWZhQWEzb0ZIbnU3ZldtSTRuMTJRMm5hdHdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80ZWRjMzYtNGQ1My00N2NmLWE2ZmMt
YjUxMTU0NjI4ZmIzLzEvNWZhQWEzb0ZIbnU3ZldtSTRuMTJRMm5hdHdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni80ZWRjMzYtNGQ1My00N2NmLWE2ZmMtYjUxMTU0NjI4ZmIz
LzEvNWZhQWEzb0ZIbnU3ZldtSTRuMTJRMm5hdHdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhzUn+O/
Rr+AsCdZsrul6DGuch/4ghXg3t16qWFzZxUxMIDqMXWphKDiJSuHNGLSlwYs+vFI
z9Al5phPZGSw9ct1yiGbtuazFx1C+cEiPhW1PMSRo0rcAHaYXJ4bLu9AdpEqJDJT
LP1XiQyODrfXHefTJCa2WAeFGV3rsGUvWGhJGwbFs4oeFkylDd5y79CpAIUE5DXw
um/DAxxxXBt2880hNLW3n0MQAD+tKQZ+Do1QR0Tzb0L0Sf3J2DD6RhqfOVih3wiU
eTBEoM90oQ/D7JiW/H7fD6CGCJ9Z122MEJZZAhYASThsG1MCMELxuvO2RBoPjFoL
A50gwImvyqw7Fw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:47:12 2026 by rpki-client